Malicious
ZIP Archive
MD5: e6f772f168e8db45fd160c44f00b0585
Size: 17.08 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | e6f772f168e8db45fd160c44f00b0585 |
| Sha1 | 95551c525f6e12f0ce8164a1e769805df522dee4 |
| Sha256 | 492125caa52f8cba760dda3e1d099a264db9c4f10588514d144f258b49b22be1 |
| Sha384 | 2fdeed01e5b9a12fb92abb8bf73c2afd51c2d3e2f4938fc36e267a78a9924792a513185202c42a77b6a5ec521a914d03 |
| Sha512 | a6cbd4f2f2d7a3e4ed095c6d769855e78c5df53094d97ff389cc87250c7da7eaf5cbf3ab293b10cdb98e15c24e5d92815733580206a36476d44f725b4f9f8a88 |
| SSDeep | 393216:+l8DnHr4O3iCe34ccaETyif3f8RC0Xydgt5qh/cTKGB0kmlp+S:G8DnH0Ove34cHfiklXF7qhSKGB0Rp+S |
| TLSH | 34072298D5FF5807CF1EBAFBB0C682859DECC7DA59205A26046C33CA5DA65B10BC520E |
Malicious
Malicious
Malicious
Malicious
Malicious
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 11
STICH kept: 3secondary ignored: 8
bin
5img
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
malicious
2 nodes
Path
arc:zip>scr:ps1~T1059.001
Shape
arc:zip>scr:ps1
technique2 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
"use shuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential